$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: ietdC1NHvxYMGLir4dETYi4AqcXdZ/TPPzwVFZRuzZI= Subject key identifier: 91:7F:86:4C:74:FD:71:17:06:44:F0:B0:F6:EE:52:04:8E:E9:5C:53 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 17EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 17D9 Signing time: Sat 31 May 2025 16:30:55 +0000 Manifest this update: Sat 31 May 2025 16:30:54 +0000 Manifest next update: Sat 07 Jun 2025 16:30:54 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: CrSeZ3wh0Zbsr4xpRsbdnvczncQoeqjcmLx28Z9qtWc=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: o72VLQ1AaTbDR0LUWxX7H2rR6ueROwUZcL0xiM3p7KI=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: XSMOrkD+VKk/yODIQVEJZLLi9dBXNMbWFRIFf5Gr+QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6124 (0x17ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: May 31 16:30:54 2025 GMT Not After : Jun 7 16:30:54 2025 GMT Subject: CN=683b2ebf-237f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:20:58:8e:1b:59:1a:e8:55:77:e0:6d:31: bf:fb:bb:b5:1e:53:23:ef:c0:7b:e5:19:1a:97:57: af:06:d7:c5:cf:ec:ec:49:a6:91:36:b6:7e:7a:7a: b1:74:c2:66:73:13:32:28:a3:07:12:10:58:c8:03: ac:04:0b:70:3c:d8:93:81:0a:8a:19:1a:c4:19:3b: 4b:0d:6e:5a:56:d6:bd:44:7e:7b:c1:17:f5:02:89: a3:d8:78:bf:2c:2f:38:39:55:b2:c7:e5:09:d9:96: 1c:9e:73:c8:c0:f6:1e:4e:b3:d7:08:d0:7d:2d:ac: 8b:61:10:8b:7a:4c:80:67:5f:b2:6c:28:07:90:07: a3:64:72:6c:77:73:e2:c2:1f:e4:55:0e:df:a9:70: d4:04:93:57:c5:9c:96:9a:fe:01:90:a3:01:e5:aa: 71:0f:dc:7a:d4:de:68:cd:65:2c:25:80:3f:27:8e: c3:78:5b:9d:7d:f7:ba:b3:7f:ce:2c:a9:05:93:68: 78:49:66:79:14:29:a2:72:09:32:e6:65:b3:d9:ef: fe:c7:85:f2:0c:d6:9e:86:36:1c:aa:26:97:4a:0b: ca:e6:cd:11:33:1b:23:89:90:9f:2b:bc:47:fb:f5: e2:15:94:1b:d6:13:f5:e2:6a:ab:b3:d4:b6:46:68: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7F:86:4C:74:FD:71:17:06:44:F0:B0:F6:EE:52:04:8E:E9:5C:53 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:9c:db:88:f7:6d:58:94:d9:4c:3a:03:ef:21:1a:bd:c7:4e: a2:6d:3d:4c:1b:f9:f3:22:0a:7f:3c:f8:59:d2:72:84:50:3c: c2:b9:b4:7e:82:72:5e:07:ae:d4:bf:e2:c3:f6:1b:3f:9e:8f: 7f:b2:87:99:fe:ff:ca:58:90:1e:fe:b9:31:31:04:92:a5:46: c8:16:d9:b6:91:8a:88:eb:a6:a1:00:75:54:9b:79:39:7a:76: 7f:85:58:9d:fa:da:df:90:a8:c1:e9:a6:8c:09:08:8b:2e:49: e0:03:05:ef:d0:95:ea:ad:90:be:0f:d3:05:16:63:09:8f:f2: c6:07:e9:75:63:e8:1a:37:d4:cd:0a:65:9b:3a:fa:2e:32:b9: 8a:54:ea:dd:21:54:92:a9:7f:11:7a:cd:94:87:6d:a0:65:df: de:d9:39:0e:18:36:45:20:7b:f9:da:4c:11:46:52:93:5e:87: f6:f3:1c:1c:ef:57:a7:83:89:20:06:69:f8:7b:54:d7:06:64: 1f:35:7d:25:ce:ce:38:e6:cf:d2:90:79:99:0d:27:c8:c7:6c: 12:81:8e:34:30:02:95:3a:9e:c0:96:58:81:5c:7b:02:68:3a: 35:92:82:53:15:d3:1f:70:1d:53:4b:fe:18:22:85:49:20:29: 5e:05:e1:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUwNTMxMTYzMDU0WhcNMjUwNjA3MTYzMDU0WjAYMRYwFAYD VQQDEw02ODNiMmViZi0yMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDIgWI4bWRroVXfgbTG/+7u1HlMj78B75Rkal1evBtfFz+zsSaaRNrZ+enqx dMJmcxMyKKMHEhBYyAOsBAtwPNiTgQqKGRrEGTtLDW5aVta9RH57wRf1Aomj2Hi/ LC84OVWyx+UJ2ZYcnnPIwPYeTrPXCNB9LayLYRCLekyAZ1+ybCgHkAejZHJsd3Pi wh/kVQ7fqXDUBJNXxZyWmv4BkKMB5apxD9x61N5ozWUsJYA/J47DeFudffe6s3/O LKkFk2h4SWZ5FCmicgky5mWz2e/+x4XyDNaehjYcqiaXSgvK5s0RMxsjiZCfK7xH +/XiFZQb1hP14mqrs9S2RmhMUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF/hkx0 /XEXBkTwsPbuUgSO6VxTMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRnNuI921YlNlMOgPvIRq9x06ibT1MG/nzIgp/PPhZ0nKEUDzCubR+ gnJeB67Uv+LD9hs/no9/soeZ/v/KWJAe/rkxMQSSpUbIFtm2kYqI66ahAHVUm3k5 enZ/hVid+trfkKjB6aaMCQiLLkngAwXv0JXqrZC+D9MFFmMJj/LGB+l1Y+gaN9TN CmWbOvouMrmKVOrdIVSSqX8Res2Uh22gZd/e2TkOGDZFIHv52kwRRlKTXof28xwc 71eng4kgBmn4e1TXBmQfNX0lzs445s/SkHmZDSfIx2wSgY40MAKVOp7AlliBXHsC aDo1koJTFdMfcB1TS/4YIoVJICleBeEn -----END CERTIFICATE-----Generated at Sat May 31 17:51:32 2025 by rpki-client